Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa
File:                     30876a99-e4bc-3990-ab15-ec36d92c9414.roa (raw, json)
Hash identifier:          j+qq1S8JfgcH6+cPJqOEVVlNeZDy5TEq9X6xBgisT/o=
Subject key identifier:   61:B8:15:3D:94:1F:49:FB:89:34:F8:FC:9F:67:5C:F3:09:71:66:0D
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584D83CAA95816C16F2087818900
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     15353
IP address blocks:        2602:f71e:ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:a9:58:16:c1:6f:20:87:81:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=dd44a238-dd7c-457b-a556-c065b3132606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:19:33:47:c4:5f:49:b5:e1:d2:e2:71:a6:
                    68:74:49:0a:1a:42:97:a7:c9:f0:30:71:62:5d:b4:
                    ac:00:5c:9e:08:9c:32:89:95:d9:fa:4b:1e:6a:44:
                    fb:a2:56:fe:c3:5d:c9:40:1f:ff:e4:69:9b:82:41:
                    a4:3e:ec:03:ef:ee:ad:d7:af:c1:cf:92:27:4a:34:
                    d3:1c:c4:75:60:f2:13:5e:72:b7:6f:99:01:4a:b0:
                    0a:18:34:93:db:df:cb:1d:46:72:e0:8c:15:0a:17:
                    20:33:43:46:45:54:d6:29:1a:64:f0:4e:5b:8f:7c:
                    55:2e:f7:c8:b3:0b:b4:27:97:3b:63:81:ec:16:37:
                    1a:e1:41:02:89:46:20:f3:ec:cd:a4:5e:14:17:1f:
                    b2:25:45:cb:40:76:64:8c:4a:5a:18:8f:ec:a4:15:
                    7c:8c:a9:81:e2:72:39:69:12:d7:dd:2c:27:fe:2b:
                    60:f8:f1:52:80:98:be:44:92:56:9f:bd:76:54:ee:
                    7e:c6:49:94:26:81:41:cc:84:af:b7:a9:f8:b0:0a:
                    1d:6e:f6:49:70:fa:4a:c7:95:d9:e7:34:8a:f5:bd:
                    2c:48:5f:74:a7:c9:bb:4b:ce:a2:d9:54:37:05:f9:
                    5e:03:ca:34:08:e0:0f:7d:19:c1:0e:90:9c:eb:80:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B8:15:3D:94:1F:49:FB:89:34:F8:FC:9F:67:5C:F3:09:71:66:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/30876a99-e4bc-3990-ab15-ec36d92c9414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f71e:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:e7:7c:2c:2f:3b:3f:a9:27:e0:c0:7b:34:e3:35:6e:a4:
         71:48:e7:dd:67:c3:9d:15:bb:ee:4b:11:38:1d:35:34:50:0f:
         ee:81:3f:28:f3:22:fa:c5:15:02:d9:5a:11:28:73:f0:44:12:
         f8:a0:21:20:d7:50:08:4b:5f:03:66:a5:d9:c8:85:92:d5:f4:
         82:27:2c:ea:66:04:4c:1d:ed:f8:49:52:fd:8f:76:98:7b:55:
         6c:09:ed:bf:89:d9:9e:53:8e:92:82:86:98:13:c6:fb:0c:35:
         38:02:29:38:a5:48:fd:52:1d:76:a1:96:a8:b0:85:cf:29:a7:
         16:61:5c:67:3b:11:24:fb:75:e6:03:28:72:cb:eb:43:37:9f:
         ec:44:7e:37:f1:9a:2e:21:4f:9b:1a:a4:d9:1c:34:d7:45:3b:
         03:18:9e:89:a6:8e:8a:4e:13:f8:5a:6e:40:48:65:b3:fd:b0:
         e4:f1:70:a1:85:f7:19:c5:34:f4:c6:db:7f:ee:66:e1:b9:b8:
         96:9a:ea:61:86:fb:0f:ba:4b:eb:ad:20:a4:8b:74:6f:ae:8c:
         57:9d:77:40:cb:b3:ae:11:51:80:e1:7d:b4:97:e6:93:60:8a:
         fe:6c:b1:9e:08:1d:59:0d:1b:f0:c0:51:c1:8f:76:31:72:fe:
         bc:e3:b9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:50 2026 by rpki-client